Fedora 40 : firefox / nss (2024-ea7b2e66a1)

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-ea7b2e66a1 advisory. Update NSS to 3.106.0 Update to Firefox 133.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 41 : mingw-libsoup (2024-af077c1f85)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-af077c1f85 advisory. Backport fixes for CVE-2024-52530 and CVE-2024-52532. Tenable has extracted the preceding description block directly from the Fedora security...

USN-7126-1: libsoup vulnerabilities

It was discovered that libsoup ignored certain characters at the end of header names. A remote attacker could possibly use this issue to perform a HTTP request smuggling attack. CVE-2024-52530 It was discovered that libsoup did not correctly handle memory while performing UTF-8 conversions. An...

Photon OS 4.0: Linux PHSA-2024-4.0-0714

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0714. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-11691

creationtimestamp| type| source ---|---|--- 2024-11-26 13:37:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113549523052042424 2024-12-13 16:10:41+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113646386597505303...

CVE-2024-38833

creationtimestamp| type| source ---|---|--- 2024-11-26 12:01:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113549148342977152 2024-11-26 13:04:11+00:00| seen| https://t.me/CyberBulletin/1625 2024-11-26 13:04:11+00:00| seen| https://t.me/CyberBulletin/26626 2024-11-26 15:02:55+00:00|...

CVE-2024-53930

creationtimestamp| type| source ---|---|--- 2024-11-25 03:10:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113541397021426026...

Fedora 40 : needrestart (2024-d2124788a8)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d2124788a8 advisory. Rebase to fix CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

MGASA-2024-0368 Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.61 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links...

Photon OS 5.0: Linux PHSA-2024-5.0-0407

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0407. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 41 : libsndfile (2024-1318318e7a)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-1318318e7a advisory. fix crash in in ogg vorbis 2322326 CVE-2024-50612 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

CVE-2024-52616

creationtimestamp| type| source ---|---|--- 2024-11-21 20:47:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113522903838141203 2024-12-24 07:03:16+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ldzuuk6cwf25 2024-12-31 14:33:27+00:00| seen|...

CVE-2024-10890

creationtimestamp| type| source ---|---|--- 2024-11-21 07:42:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113519815681471528...

PT-2024-8392

Name of the Vulnerable Software and Affected Versions PHP versions 8.1. before 8.1.31 PHP versions 8.2. before 8.2.26 PHP versions 8.3. before 8.3.14 Description The issue is related to an integer overflow in the ldap escape function on 32-bit systems when handling uncontrolled long string inputs...

Oracle Linux 9 : buildah (ELSA-2024-9459)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9459 advisory. - rebuild to fix CVE-2024-34156 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

PT-2024-9339 · Drupal · Drupal Core

Name of the Vulnerable Software and Affected Versions: Drupal Core versions 8.8.0 through 10.2.11 Drupal Core versions 10.3.0 through 10.3.9 Drupal Core versions 11.0.0 through 11.0.8 Description: The issue is related to insufficient protection of the web page structure, allowing an attacker to...

Oracle Linux 9 : grafana (ELSA-2024-9473)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9473 advisory. - Resolves RHEL-62308: CVE-2024-47875 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Vulnerabilities fixed in VMware vCenter Server

VMware has fixed vulnerabilities in vCenter Server. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, possibly even to root and execute arbitrary code on the system. VMware reports in an update to its original security advisory that exploits have been...

Vulnerabilities fixed in Siemens Tecnomatix Plant Simulation

Siemens has fixed vulnerabilities in Tecnomatix Plant Simulation. The vulnerabilities are in how Tecnomatix Plant Simulation processes specially crafted WRL files. These vulnerabilities include out-of-bounds writes, use-after-free and stack-based overflows, all of which can be exploited by...

Oracle Linux 9 : jose (ELSA-2024-9181)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9181 advisory. 14-1 - Rebase jose-14 upstream version Resolves: RHEL-38079 Tenable has extracted the preceding description block directly from the Oracle Linux securi...